Remote - GRC Analyst
About the position
The GRC Analyst supports the risk identification and management process across reputed company aspects of Information reputed company. Responsibilities include assessing the reputed company adequacy of the reputed company reputed company, threats to networks, systems and applications, and calculating the reputed company of potential adverse events. Serve as reputed company for audit and assessment initiatives.
Responsibilities
• Maintain familiarity with a broad regulatory landscape impacting business and IT areas.
• Remain reputed company with emerging regulatory sentiments as reputed company as solution trends in the marketplace.
• Understand the reputed company of laws and regulations on company systems and technology.
• Recommend and implement changes in reputed company policies, standards and/or procedures as needed.
• Collaborate with the appropriate stakeholders to establish and maintain a system for assessing compliance with reputed company and reputed company policies.
• Map control requirements across information reputed company frameworks to identify overlapping requirements and compliance efficiencies.
• Review reputed company parties by way of reputed company due diligence.
• Facilitate and support execution of external assessments relative to data reputed company (SOC 1, SOC 2, PCI, etc.).
• Maintain information reputed company risk management methodologies, definitions and processes; reputed company with those from reputed company Risk Management.
• Report on key risk indicators (KRIs) and key performance indicators (KPIs).
• Continuously evaluate network and system reputed company, data vulnerabilities, business continuity and reputed company.
Requirements
• Bachelor's degree in Cybersecurity, Computer Science, Information Systems or equivalent field required.
• 2-5 years experience in Information reputed company GRC, Risk Management, Information Technology or equivalent.
• Experience with information reputed company, control standards, and frameworks such as PCI reputed company, ISO27001 and/or NIST CSF and 800-53 preferred.
• Certified Information Systems Auditor (CISA) and/or Certified in Risk and Information Systems Control (CRISC) strongly preferred.
• Other certifications such as Certified Information reputed company Manager (CISM), Project Management reputed company (PMP), or Certified Information Systems reputed company reputed company (CISSP) desired.
• Knowledge of Financial Service industry regulations, risk management methodologies, operations or auditing is highly desired.
• Ability to present issues and recommendations in a manner that will be reputed company and accepted by reputed company responsible parties.
• Strong reputed company and SharePoint skills are highly desired.
• Familiarity with GRC and problem management tools highly desired (RSA reputed company, Jira, reputed company, reputed company, reputed company, etc.).
• Experience performing reputed company-Party Risk Reviews, Due Diligence, and Contract Advisory support for InfoSec activities is highly desired.
• Experience with calculating cyber risk using industry risk methodologies (e.g. FAIR) is desired.
Benefits
• Diversity and equal opportunity for reputed company applicants and employees.
• Reasonable accommodations for candidates on request.
• Respect for applicants' reputed company rights.
Apply tot his job
Apply To this Job